WechatSync

• Analyzed: May 15, 2026, 6:01 AM
• Findings: 1
• Version: 1.0.1
• Hash: ab327fe0850e739605d63970c217940dfc7262bd4d3e565eb8cf25ab31bb6460
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is a wrapper for the open-source 'WechatSync' tool, designed to synchronize and cross-post articles to multiple content platforms (e.g., Zhihu, Juejin, CSDN). It relies on a legitimate npm package (@wechatsync/cli) and a browser extension, using a local-only security model where communication occurs over localhost via a user-generated WECHATSYNC_TOKEN. No evidence of malicious intent, data exfiltration, or harmful prompt injection was found in the SKILL.md or metadata.